There have not been many instances where the DPA is enforced. And enforcement happens on a national level, not EU.
Someone has to file a complaint at some national watchdog, who then investigates (which can take a long time), and then can fine the business. This happened only a handful of times in the EU over the past few years, not sure about Zoom specifically.